Application Security Specialist (AI)

TL;DR

Application Security Specialist (AppSec): Performing hands-on application penetration testing across web, mobile, and AI/LLM integrations with an accent on threat modeling and secure design reviews. Focus on identifying critical vulnerabilities, supporting remediation strategies, and improving customers' secure SDLC processes.

Location: Hybrid (Herzliya, Israel)

Company

A cybersecurity firm specializing in delivery and application security assessments.

What you will do

• Conduct penetration testing for web, mobile, API, and AI/LLM integrations.
• Perform threat modeling and secure design reviews to identify risks early in the development lifecycle.
• Provide practical remediation guidance and secure coding training to development teams.
• Evaluate and optimize customers' application security development lifecycles, vulnerability management, and security gates.
• Lead client-facing discussions regarding assessment scoping and vulnerability walkthroughs.

Requirements

• 2+ years of hands-on experience in application penetration testing.
• Strong understanding of OWASP Top 10 and CWE Top 25.
• Familiarity with high-level programming languages such as Java, JS, or Python.
• Relevant certifications such as EWPTX or OSWE.
• Strong English communication skills for client-facing technical discussions.

Nice to have

• Deep understanding of LLM Top 10, AI security risks, and AI/LLM hacking techniques.
• Proven experience in secure code review or high-level code auditing.
• Knowledge of Secure SDLC methodologies, including Microsoft SDL, OWASP SAMM, and OWASP ASVS.